Prevent users to access some websites

TontonsamTontonsam Member Posts: 90 ■■□□□□□□□□
in Server 70-290
I have some users who are watching videos all the time from internet. They do radio broadcasting, go to youtube. Can you provide an easy way to block these users to those websites with a central managment. I don't want to go to all the machines to block those websites. When they watch videos from internet, they use almost the bandwith and the provider slow down the signal for a certain period of time, so my internet is always slow. I am thinking to install a proxy server but do you have a solution for that.
MCP 70-270 / 70-290
· Share on FacebookShare on Twitter

Comments

  • ladiesman217ladiesman217 Member Posts: 416
    websense :)
    No Sacrifice, No Victory.
    · Share on FacebookShare on Twitter
  • the_erickeethe_erickee Member Posts: 74 ■■□□□□□□□□
    ladiesman217 wrote:
    websense :)
    It works great. We use it up here.
    Erick Marshall - @erickbm

    MCSE,MCITP x2,vExpert 2015,VCAP,VCP5 x2,MCSA x2,MCTS x3,MCP x2,UCP,Network+,A+
    · Share on FacebookShare on Twitter
  • undomielundomiel Member Posts: 2,818
    You could use Dan's Guardian with a squid proxy server.

    http://dansguardian.org/
    Jumping on the IT blogging band wagon -- http://www.jefferyland.com/
    · Share on FacebookShare on Twitter
  • DiminutiveDiminutive Member Posts: 102 ■■■□□□□□□□
    You could add an entry to DNS directing them to a work productivity site.

    1bf303bf8760dfa32b481492b9ccf422.jpg
    WIP: Win2008 MCITP Upgrade
    · Share on FacebookShare on Twitter
  • ronpasa69ronpasa69 Member Posts: 40 ■■□□□□□□□□
    Diminutive wrote:
    You could add an entry to DNS directing them to a work productivity site.

    1bf303bf8760dfa32b481492b9ccf422.jpg

    hehehe, I like this suggestion the best. This would really trip them out. MAYBE THEN THEY WOULD GET THE MESSGAE. icon_bounce.gif
    · Share on FacebookShare on Twitter
  • astorrsastorrs Member Posts: 3,139 ■■■■■■□□□□
    ladiesman217 wrote:
    websense :)
    +1 especially now that they bought SurfControl, they totally own that market... :)
    twitter: @astorrs
    profile: linkedin.com/in/astorrs
    · Share on FacebookShare on Twitter
  • bjaxxbjaxx Member Posts: 217
    astorrs wrote:
    ladiesman217 wrote:
    websense :)
    +1 especially now that they bought SurfControl, they totally own that market... :)


    What type of firewall do you have? you probably have it built in and don't know it.
    "You have to hate to lose more than you love to win"
    · Share on FacebookShare on Twitter
  • arwesarwes Member Posts: 633 ■■■□□□□□□□
    astorrs wrote:
    ladiesman217 wrote:
    websense :)
    +1 especially now that they bought SurfControl, they totally own that market... :)

    Wow shows how long it's been since I kept up with that stuff. I didn't know that happened!

    We just use the proxy server that's built into the routers we use (MikroTik). It's really barebones stuff, but we've got most of the blogging & social networking sites blocked so it's doing what we want for right now.
    [size=-2]Started WGU - BS IT:NDM on 1/1/13, finished 12/31/14
    Working on: Waiting on the mailman to bring me a diploma
    What's left: Graduation![/size]
    · Share on FacebookShare on Twitter
  • bwcartybwcarty Member Posts: 422 ■■■□□□□□□□
    Changing your DNS is quick, easy, free, and potentially fun, but it only works if you know where people are going. If you need more control and less hands on administration, look into Websense.
    Help eradicate blood cancers with a donation to the Leukemia & Lymphoma Society.
    · Share on FacebookShare on Twitter
  • royalroyal Member Posts: 3,352 ■■■■□□□□□□
    +1 for Websense.
    “For success, attitude is equally as important as ability.” - Harry F. Banks
    · Share on FacebookShare on Twitter
  • TontonsamTontonsam Member Posts: 90 ■■□□□□□□□□
    Ok, I will try websense but how it works. Do I need to install it to my PDC server and no action on client machines?
    MCP 70-270 / 70-290
    · Share on FacebookShare on Twitter
  • astorrsastorrs Member Posts: 3,139 ■■■■■■□□□□
    Tontonsam wrote:
    Ok, I will try websense but how it works. Do I need to install it to my PDC server and no action on client machines?
    I'm assuming you have less than 250 users, as such Websense Express would be your best bet.

    http://www.websense.com/docs/datasheets/en/Websense_Express.pdf
    twitter: @astorrs
    profile: linkedin.com/in/astorrs
    · Share on FacebookShare on Twitter
  • TontonsamTontonsam Member Posts: 90 ■■□□□□□□□□
    Í prefer this by Websense Enterprise. But I am not involved in DNS yet and I am very excited to book my 70-290 exam to study the 291 that look in DNS. But, if I want to resolve this problem with DNS entry, how can I do that? I will try the Websense and will let u know the level of satisfaction.
    MCP 70-270 / 70-290
    · Share on FacebookShare on Twitter
  • sprkymrksprkymrk Member Posts: 4,884 ■■■□□□□□□□
    Tontonsam wrote:
    But, if I want to resolve this problem with DNS entry, how can I do that?

    Simply create an A record on your DNS server for whatever site you want to restrict, then put in a bogus address like 0.0.0.0 or the address of your company home page.
    All things are possible, only believe.
    · Share on FacebookShare on Twitter
  • ladiesman217ladiesman217 Member Posts: 416
    Tontonsam wrote:
    Ok, I will try websense but how it works. Do I need to install it to my PDC server and no action on client machines?

    I found this one.

    http://www.websense.com/docs/support/documentation/setup/v61/WebsenseDeploymentGuide.pdf
    No Sacrifice, No Victory.
    · Share on FacebookShare on Twitter
  • TontonsamTontonsam Member Posts: 90 ■■□□□□□□□□
    Websense is very awesome even though I see today it s not very working. When I click to server\download, it says payment overdue. But it is a very good software. Anyway, I tried to block yahoo.com in the dns level. In the forward lookup zones, I right click/ New host (A). In the name, I typed yahoo.com and let the ip address to 0.0.0.0. But it s not working. Can you explicitly provide the steps for blocking yahoo site for example.
    MCP 70-270 / 70-290
    · Share on FacebookShare on Twitter
  • meadITmeadIT Member Posts: 581 ■■■■□□□□□□
    You would also have to clear your local cache by running 
    ipconfig /flushdns

    When you type in yahoo.com, your pc will look in your local cache first. If it's not in there, then it will query your DNS server.
    CERTS: VCDX #110 / VCAP-DCA #500 (v5 & 4) / VCAP-DCD #10(v5 & 4) / VCP 5 & 4 / EMCISA / MCSE 2003 / MCTS: Vista / CCNA / CCENT / Security+ / Network+ / Project+ / CIW Database Design Specialist, Professional, Associate
    · Share on FacebookShare on Twitter
  • TontonsamTontonsam Member Posts: 90 ■■□□□□□□□□
    This command doesn't resolve anything. Could you provide the steps, maybe I do something wrong?
    MCP 70-270 / 70-290
    · Share on FacebookShare on Twitter
  • rbutturinirbutturini Member Posts: 123
    Websense is very good, and Cymphonix is also good, albeit pricey. You may even be able to get a version of websense that integrates with your firewall.
    · Share on FacebookShare on Twitter
  • astorrsastorrs Member Posts: 3,139 ■■■■■■□□□□
    Tontonsam wrote:
    In the forward lookup zones, I right click/ New host (A). In the name, I typed yahoo.com and let the ip address to 0.0.0.0.
    You would want to create a new forward lookup zone for yahoo.com; putting it inside your existing one (say company.com) and creating the host record as you described would create a host called "yahoo.com.company.com".
    twitter: @astorrs
    profile: linkedin.com/in/astorrs
    · Share on FacebookShare on Twitter
  • TontonsamTontonsam Member Posts: 90 ■■□□□□□□□□
    It works but I'd like in the future to describe the steps cause I was thinking that I am a foolish guy. :D But I remark that I have to create a primary zone for all the sites I want to block, can I put them in a one container or one primary zone? Now, I am ok with the sites, how can now I block some messenger like ovoo, yahoo, skype with their ports?
    MCP 70-270 / 70-290
    · Share on FacebookShare on Twitter
Sign In or Register to comment.